This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa File: 4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa (raw, json) Hash identifier: ITGD8b+FCm11c80KFD5+ZoRZrONhlzxP1zvlRlrSgkM= Subject key identifier: E1:E1:89:67:B2:73:A8:2B:11:3C:EA:17:4D:6D:8E:45:37:A2:3F:CA Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B79EC4C8B4515EDD24A38C2979B0EE15F Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 46.150.240.0/24 maxlen: 24 46.150.241.0/24 maxlen: 24 46.150.242.0/24 maxlen: 24 46.150.243.0/24 maxlen: 24 46.150.244.0/24 maxlen: 24 46.150.245.0/24 maxlen: 24 46.150.246.0/24 maxlen: 24 46.150.247.0/24 maxlen: 24 46.150.250.0/24 maxlen: 24 46.150.251.0/24 maxlen: 24 46.150.252.0/24 maxlen: 24 46.150.253.0/24 maxlen: 24 46.150.254.0/24 maxlen: 24 46.150.255.0/24 maxlen: 24 176.103.80.0/24 maxlen: 24 176.103.81.0/24 maxlen: 24 176.103.84.0/24 maxlen: 24 176.103.85.0/24 maxlen: 24 176.103.86.0/24 maxlen: 24 176.103.87.0/24 maxlen: 24 176.103.88.0/24 maxlen: 24 176.103.89.0/24 maxlen: 24 176.103.90.0/24 maxlen: 24 176.103.91.0/24 maxlen: 24 176.103.92.0/24 maxlen: 24 176.103.93.0/24 maxlen: 24 176.103.94.0/24 maxlen: 24 176.103.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4c:8b:45:15:ed:d2:4a:38:c2:97:9b:0e:e1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1e18967b273a82b113cea174d6d8e4537a23fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:67:8f:c9:8e:52:bc:3d:f8:26:51:99:c9:78: 96:a1:0d:0a:65:77:01:7c:9d:08:bf:97:f6:be:f9: 20:40:c2:ce:7c:e6:bf:03:b2:35:fe:34:36:8e:56: ee:01:77:c7:e5:6a:ba:f0:d0:c1:95:2b:a9:6f:34: 13:1a:b4:ed:fb:a9:7a:b4:bb:02:da:cb:80:08:00: a5:b1:c9:bc:c4:03:46:4c:6c:a0:f9:bf:85:1f:f4: 59:40:7e:1b:d4:bc:57:b8:97:73:e9:86:af:ba:0d: 1c:19:11:a8:67:f1:3e:fd:06:f4:be:53:d2:51:f5: 62:d4:16:4c:f9:df:11:c9:a3:3b:1e:82:b6:92:ca: 4d:0d:7f:f7:4c:c1:e1:90:2c:7a:5e:5e:e4:8b:00: 03:50:8c:28:e8:63:b8:d7:26:8a:10:ca:ce:6c:e7: 79:b4:44:97:18:28:22:e9:6d:b1:ef:92:00:20:cd: 23:46:e4:3f:78:77:71:b0:aa:65:08:64:2f:16:00: 8f:d6:43:9c:63:c6:87:82:ca:45:f8:81:d3:6d:62: 97:fd:ad:cf:d7:a6:7e:48:c6:13:6c:9f:ce:b5:b9: 57:f8:3f:bc:d1:25:03:61:61:aa:73:85:ed:ee:85: e2:c6:81:cc:cf:f9:56:70:7b:bc:3c:ab:bb:71:43: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:89:67:B2:73:A8:2B:11:3C:EA:17:4D:6D:8E:45:37:A2:3F:CA X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.150.240.0/21 46.150.250.0-46.150.255.255 176.103.80.0/23 176.103.84.0-176.103.95.255 Signature Algorithm: sha256WithRSAEncryption 7b:eb:ff:c4:a4:a1:46:08:3d:37:6e:1d:95:ba:84:1f:dc:c0: a9:bb:49:72:e8:93:df:90:bd:f7:84:36:ae:6e:85:d0:3c:19: 0a:54:06:50:e3:d7:e7:2d:cd:22:38:df:26:a4:b2:9c:d3:5d: 11:34:44:22:08:65:4e:20:b0:b0:89:97:cf:f5:3d:53:0c:90: 58:37:8f:4d:82:92:58:8d:84:c8:13:3c:3b:6c:32:97:4d:eb: 72:83:00:ff:b6:6f:2c:7f:66:d5:cd:53:8e:f8:6a:db:63:09: de:07:a3:00:a5:8c:f6:42:80:d5:ac:78:87:03:62:e7:78:34: ca:33:51:03:bc:9e:c7:44:b4:f2:d2:11:0c:1d:18:90:ea:cd: 52:84:83:5c:91:8d:45:78:3d:94:1c:12:9b:13:07:39:ff:f5: 2b:f7:f1:c7:fe:be:97:1f:46:27:81:1b:5b:44:a1:64:96:ef: 5c:08:1b:af:b1:d7:b1:2b:e0:ce:4b:1c:15:42:1b:10:f5:2d: 2e:4c:fc:7b:63:bc:cd:59:53:b5:c6:b4:da:2a:44:80:ab:a8: c5:bf:a2:ba:41:c5:b5:6e:02:56:08:e7:09:4c:13:48:8e:83: ea:da:3a:c9:64:b9:40:03:74:fb:cd:91:b6:a3:ec:59:2b:5c: a9:7b:7d:0f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57EyLRRXt0ko4wpebDuFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWUxODk2N2IyNzNhODJiMTEzY2VhMTc0ZDZkOGU0NTM3YTIzZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WePyY5SvD34JlGZyXiWoQ0KZXcB fJ0Iv5f2vvkgQMLOfOa/A7I1/jQ2jlbuAXfH5Wq68NDBlSupbzQTGrTt+6l6tLsC 2suACAClscm8xANGTGyg+b+FH/RZQH4b1LxXuJdz6Yavug0cGRGoZ/E+/Qb0vlPS UfVi1BZM+d8RyaM7HoK2kspNDX/3TMHhkCx6Xl7kiwADUIwo6GO41yaKEMrObOd5 tESXGCgi6W2x75IAIM0jRuQ/eHdxsKplCGQvFgCP1kOcY8aHgspF+IHTbWKX/a3P 16Z+SMYTbJ/OtblX+D+80SUDYWGqc4Xt7oXixoHMz/lWcHu8PKu7cUPvLQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOHhiWeyc6grETzqF01tjkU3oj/KMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvNGVHSlo3SnpxQ3NSUE9vWFRXMk9SVGVpUDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnAwQDLpbwMAsD BAEulvoDAwAulgMEAbBnUDAMAwQCsGdUAwQFsGdAMA0GCSqGSIb3DQEBCwUAA4IB AQB76//EpKFGCD03bh2VuoQf3MCpu0ly6JPfkL33hDauboXQPBkKVAZQ49fnLc0i ON8mpLKc010RNEQiCGVOILCwiZfP9T1TDJBYN49NgpJYjYTIEzw7bDKXTetygwD/ tm8sf2bVzVOO+GrbYwneB6MApYz2QoDVrHiHA2LneDTKM1EDvJ7HRLTy0hEMHRiQ 6s1ShINckY1FeD2UHBKbEwc5//Ur9/HH/r6XH0YngRtbRKFklu9cCBuvsdexK+DO SxwVQhsQ9S0uTPx7Y7zNWVO1xrTaKkSAq6jFv6K6QcW1bgJWCOcJTBNIjoPq2jrJ ZLlAA3T7zZG2o+xZK1ype30P -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:34 2026 by rpki-client